Privacy Policy
What we collect, why, where it’s kept and what you can do about it. We’ve kept it to what the site really does.
Last updated: 7 October 2026
1. Who is responsible
The data controller for moroccobylocals.com is the operator of this website. You can contact us through the contact form. For privacy requests, reach us by email [email protected], our contact form.
2. What we collect
If you only browse and play
- Your age confirmation (“I’m 18 or over”), remembered in your browser’s local storage. It isn’t sent to us.
- A list of recently opened games and a visit timer, kept in your browser only (see the Cookie Policy).
- Our hosting provider’s servers keep standard technical logs (such as IP address, time, pages requested and browser type) for security and to keep the site running.
If you create an account with email
- First name, last name, email address and date of birth (used to check you’re 18+).
- A password, stored only as a one-way scrambled “hash”, never as you typed it.
- Technical account records: when you joined, your last sign-in, a count of failed sign-in attempts (five wrong tries pause sign-in for 15 minutes) and, while a reset is pending, a hashed reset code and its expiry time.
If you use Google sign-in
- When you press “Continue with Google”, your browser loads Google’s sign-in script and you sign in on Google’s window. Google tells us your name, verified email address and Google account ID. Our server checks the sign-in directly with Google.
- We then ask for your date of birth and confirmation that you’re 18+ and in the UK, and store the details above (without a password).
If you write to us
- When you use the Contact or Support forms, we collect your name, email address, topic and message. They’re sent to our support inbox by email.
- Our server keeps a short log of each attempt with the date, which form was used, the topic and whether sending worked. It does not record your name, email address or message.
- If you ask for a password reset, we email a one-hour reset link to the address on the account.
We never ask for or store card or bank details, because nothing on the site costs money.
3. Where it’s kept and for how long
- Account details are stored on our server as a protected file (we don’t use a database) that can’t be opened from the web. They stay until you delete your account from My account or ask us to delete it.
- Messages you send reach us by email and are kept in our support inbox only as long as needed to deal with your request and any follow-up.
- Browser storage (age confirmation, recent games, notice choice) stays on your device until you clear it. The visit timer is cleared when you close the tab.
- Server logs are kept by our hosting provider for a limited period under its own routines.
4. Why we use it
| Purpose | Information | Legal basis (UK GDPR) |
|---|---|---|
| Run your account and sign you in | Name, email, password hash, Google ID, sign-in records | Performing our agreement with you |
| Check you’re 18 or over | Date of birth, age confirmation | Legitimate interests (keeping the site adults-only) and legal obligations |
| Reply to messages and reset passwords | Name, email, topic, message | Legitimate interests (answering you) and performing our agreement |
| Keep the site secure and working | Failed-sign-in counts, server logs, session cookie | Legitimate interests |
| Remember your age check and recent games on your device | Browser storage | Strictly necessary / your own device settings; see Cookie Policy |
5. Who we share it with
- Email delivery provider. Messages from the forms and reset emails are sent through an SMTP email service (Brevo) so that they reach our inbox and yours.
- Google, only if you choose Google sign-in. Google’s own privacy policy applies.
- Game developers. The games load inside our pages from our own domain and may keep their own settings or credit balances in your browser. We don’t pass your account details to them.
- Hosting provider, which stores the site and its logs for us.
- Authorities, if the law requires it.
Some of these providers may handle data outside the UK. Where they do, they should use the safeguards the law requires.
6. What we don’t do
- No advertising and no advertising cookies or trackers.
- No analytics tools and no profiling.
- We don’t sell your information, and we don’t send marketing emails. We only email you when you write to us or ask for a password reset.
- No third-party fonts: the site’s fonts are served from our own domain.
7. Your rights
Under UK data protection law you can ask to see the information we hold about you, have it corrected or deleted, restrict or object to how it’s used, and ask for a copy you can move. You can delete your account yourself at any time from My account, which removes it from our server. For anything else, contact us through email [email protected], our contact form (choose “Privacy question”).
If you’re unhappy with how we handle your information you can complain to the Information Commissioner’s Office at ico.org.uk.
8. Age limit
The site is for adults aged 18 or over. We don’t knowingly collect information from anyone under 18. If you think someone under 18 has an account, please tell us and we’ll delete it.
9. Changes
If what the site does with your information changes, we’ll update this page. The date at the top shows the latest version.